DDL trigger kind functionality in PostGreSQL

Started by dipti shahabout 16 years ago2 messagesgeneral
Jump to latest
#1dipti shah
shahdipti1980@gmail.com

Hi,

I was looking for SQL DDL trigger kind of functionality in PostGreSQL but
couldn;t find any. Could anyone please tell me how to achieve the similar
functionality in PostGreSQL. Basically I want to make sure that no users
should use "DROP" command directly on my database even though he/she owner
of table or any database object. I want users to use stored procedures
always to drop or alter the tables and any other database objects.

Any alternative way would be really helpful.

Thanks,
Dipti

#2Bruce Momjian
bruce@momjian.us
In reply to: dipti shah (#1)
Re: DDL trigger kind functionality in PostGreSQL

On Thu, Feb 18, 2010 at 4:55 AM, dipti shah <shahdipti1980@gmail.com> wrote:

Hi,

I was looking for SQL DDL trigger kind of functionality in PostGreSQL but
couldn;t find any.

There isn't any.

Basically I want to make sure that no users
should use "DROP" command directly on my database even though he/she owner
of table or any database object. I want users to use stored procedures
always to drop or alter the tables and any other database objects.

You could revoke their access to drop the objects and create SECURITY
DEFINER functions which do the drops. Then only grant execute access
to the people who should have had access to drop the objects in the
first place.

--
greg